$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer File: ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer (raw, json) Hash identifier: piWBTOMSKmVqARNVqhP6e3YY980GwILV9KSk9gm8ic8= Subject key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B9E6FA05CA32CE093B7E04040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 16:30:20 +0000 Certificate not after: Mon 17 Jan 2028 15:05:51 +0000 Subordinate resources: AS: 18636 IP: 142.248.45.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:6f:a0:5c:a3:2c:e0:93:b7:e0:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 23 16:30:20 2025 GMT Not After : Jan 17 15:05:51 2028 GMT Subject: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:01:a4:17:53:fc:1c:14:7e:a7:21:f5:ee: 07:01:44:8b:30:0f:b9:e9:6a:26:40:0c:69:3e:0a: d2:dd:06:48:b5:69:77:02:41:4a:d7:b5:9e:2b:9b: 50:ab:01:3d:74:db:b9:18:85:83:bb:f9:16:a6:08: f5:77:71:79:75:18:bd:83:c7:32:14:fd:dd:31:2b: b4:bd:b1:55:59:0f:b9:9e:2a:b7:0e:97:ec:71:bc: 12:dd:74:2b:7b:3b:50:7c:3b:cf:e1:f7:ab:1a:72: 3a:88:e8:6c:db:8f:35:04:f7:01:9d:25:d0:f4:0c: 86:e3:ea:eb:44:f8:f1:c2:75:44:de:a2:2d:ef:a2: 77:a2:1a:9a:63:b4:7b:ab:7a:12:8f:ec:8c:b0:12: fd:bc:f1:34:47:1d:66:f0:98:e4:10:d9:51:5a:23: b6:f9:e4:ba:4c:01:fb:29:03:fd:d6:45:59:fe:ec: d1:ba:1e:6f:01:71:8b:1e:93:39:a4:bc:04:b8:f8: 1e:ca:c6:09:cf:e8:79:02:f3:e4:19:07:a3:ab:e9: 98:8a:ad:90:1e:99:82:2b:4e:2f:20:fc:42:5d:c5: 02:03:ba:2b:6a:f8:ca:08:19:db:e4:5c:03:1d:03: b6:cf:84:66:03:ab:67:de:d8:c5:e7:c1:54:0f:7c: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18636 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8c:d1:ca:f3:cf:22:83:5e:61:c1:d4:60:fd:dc:ad:64:05: 63:f5:81:0a:36:80:b7:1f:76:e7:51:39:c9:cf:89:3a:36:8b: a8:b3:73:20:76:4f:d2:b0:45:2b:77:04:1e:db:25:a6:6e:49: 78:ba:cd:67:d0:37:40:44:50:1e:cc:29:67:53:58:10:11:d5: 77:54:54:de:c6:0a:78:1c:8b:b8:85:95:e3:36:c0:bb:b4:8b: 30:0f:0f:c8:f0:99:40:10:fb:e9:2d:1e:09:aa:2b:97:ec:c2: 55:09:9e:5f:2e:fc:5e:6f:dc:1d:02:6f:b2:67:97:a9:07:ee: 11:8f:55:0f:d1:da:dc:54:70:1e:1a:ed:05:42:b7:e0:26:da: c4:a9:27:9d:3c:9a:a2:11:31:c3:1a:7d:8c:c7:16:48:88:cf: 7d:43:74:6d:60:eb:c3:13:b1:33:d4:47:f6:1b:e2:f8:13:0b: 94:00:ee:e6:ff:d0:4f:b6:d1:68:72:98:78:aa:ec:e7:14:c7: 04:c5:bd:38:50:2d:02:89:52:1a:49:7e:8a:46:76:29:02:78: c7:5d:1b:10:7a:a4:26:ce:9a:4a:e2:29:9f:7c:e5:37:7c:92: 4b:e6:7b:0f:4e:8a:db:98:34:f3:1c:46:cf:ba:39:92:87:59: 14:25:91:fc -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEueb6Bcoyzgk7fgQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAyMzE2MzAyMFoXDTI4MDExNzE1MDU1MVowLzEtMCsGA1UEAxMk ZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFhY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6cBpBdT/BwUfqch9e4HAUSLMA+56WomQAxp PgrS3QZItWl3AkFK17WeK5tQqwE9dNu5GIWDu/kWpgj1d3F5dRi9g8cyFP3dMSu0 vbFVWQ+5niq3DpfscbwS3XQreztQfDvP4ferGnI6iOhs2481BPcBnSXQ9AyG4+rr RPjxwnVE3qIt76J3ohqaY7R7q3oSj+yMsBL9vPE0Rx1m8JjkENlRWiO2+eS6TAH7 KQP91kVZ/uzRuh5vAXGLHpM5pLwEuPgeysYJz+h5AvPkGQejq+mYiq2QHpmCK04v IPxCXcUCA7oravjKCBnb5FwDHQO2z4RmA6tn3tjF58FUD3yHZwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFIn7V0s4fNGmc3A2fS3n5aUrtWmWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9l YzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2VjMzY3YmIwLWE2ZTAtNDc2OS05 ZTkzLWU4ZTliNmExYWNiOS9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZh MWFjYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+C0wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SMwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXIzRyvPPIoNeYcHUYP3crWQFY/WBCjaAtx9251E5yc+JOjaL qLNzIHZP0rBFK3cEHtslpm5JeLrNZ9A3QERQHswpZ1NYEBHVd1RU3sYKeByLuIWV 4zbAu7SLMA8PyPCZQBD76S0eCaorl+zCVQmeXy78Xm/cHQJvsmeXqQfuEY9VD9Ha 3FRwHhrtBUK34CbaxKknnTyaohExwxp9jMcWSIjPfUN0bWDrwxOxM9RH9hvi+BML lADu5v/QT7bRaHKYeKrs5xTHBMW9OFAtAolSGkl+ikZ2KQJ4x10bEHqkJs6aSuIp n3zlN3ySS+Z7D06K25g08xxGz7o5kodZFCWR/A== -----END CERTIFICATE-----Generated at Sun Oct 26 22:49:32 2025 by rpki-client